Start the synchronization process
The amount of time that the BlackBerry Directory Sync Tool requires to complete the synchronization process varies depending on the number of
changes that the tool must complete. The amount of time that the tool requires to assign
a user account to a group or to remove a user account from a group is similar to the
amount of time that it takes to perform the same task using the Administration Console.
Note: It is a best practice to run the tool during low usage periods. Depending on
the number of changes that must be synchronized, the BlackBerry Directory Sync Tool might have a performance impact on your organization's environment.
- If necessary, map groups in Microsoft Active Directory to virtual provisioning groups.
- Map groups in Microsoft Active Directory to groups in an MDM domain.
- Preview the synchronization process.
- On the computer that hosts the BlackBerry Directory Sync Tool, on the taskbar, click Start > All Programs > BlackBerry Resource Kit > BlackBerry Resource Kit for Universal Device Service > BlackBerry Directory Sync Tool client.
-
Perform one of the following actions:
- If you want to remove all user accounts from a Universal Device Service group if the Microsoft Active Directory group that it is mapped to does not exist in the directory, select the Force Synchronization check box.
- If you do not want to remove user accounts from a Universal Device Service group if the Microsoft Active Directory group that it is mapped to does not exist in the directory, clear the Force Synchronization check box. Details are written to the report and log file.
- If you want to view the report after the preview completes, select the Show Report check box.
- Click Execute.
- To review the report, click View > Report.
- To review the log file, click File > Open Application Data Folder.
- If you enabled provisioning and the synchronization process added administrator accounts to the Universal Device Service, use the Administration Console to assign administrative roles to the accounts.
- When the tool adds a device-enabled user account to the Universal Device Service, the user account can be activated using Microsoft Active Directory credentials. The Universal Device Service does not send an activation email to users. You must send the activation information to users.
- You can use the Scheduled Tasks system tool in Windows, or any task scheduling application, to run the tool automatically at a set interval. When you create the scheduled task to run the tool, specify the full path of the tool and the -preview or -execute command. If the path includes spaces, enclose the path in quotation marks (for example, "C:\Program Files (x86)\Research In Motion\BlackBerry Resource Kit for Universal Device Service\DirectorySync.exe" -execute). Configure the task to run using the same Windows account that you used to map groups.
- If you change the membership of a Universal Device Service group using the Administration Console, you must make the same changes to the Microsoft Active Directory group that is mapped to the Universal Device Service group. If you do not make the same changes to the Microsoft Active Directory group, the changes that you made might be reverted the next time you run the synchronization process.
Was this information helpful? Send us your comments.